1824be1799f0c32c14c5fcb3c5d34c98b9fb4d2b867067b8ddc3d129783812fe

Submit
Reports

Overview

overview

Static

static

quarantine...Ab.exe

windows7-x64

quarantine...Ab.exe

windows10-2004-x64

quarantine...Jz.exe

windows7-x64

quarantine...Jz.exe

windows10-2004-x64

quarantine...8M.exe

windows7-x64

quarantine...8M.exe

windows10-2004-x64

quarantine...0.html

windows7-x64

quarantine...0.html

windows10-2004-x64

quarantine...n.html

windows7-x64

quarantine...n.html

windows10-2004-x64

quarantine...y.html

windows7-x64

quarantine...y.html

windows10-2004-x64

quarantine/am_no.bat

windows7-x64

quarantine/am_no.bat

windows10-2004-x64

quarantine...ad.exe

windows10-2004-x64

quarantine...Y.html

windows7-x64

quarantine...Y.html

windows10-2004-x64

quarantine...t.html

windows7-x64

quarantine...t.html

windows10-2004-x64

quarantine...2.html

windows7-x64

quarantine...2.html

windows10-2004-x64

quarantine/pic2.exe

windows7-x64

quarantine/pic2.exe

windows10-2004-x64

quarantine/pic3.exe

windows10-2004-x64

quarantine/random.exe

windows7-x64

quarantine/random.exe

windows10-2004-x64

quarantine...s.html

windows7-x64

quarantine...s.html

windows10-2004-x64

quarantine...mz.exe

windows7-x64

quarantine...mz.exe

windows10-2004-x64

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
26/02/2025, 23:45

Sharing

Copy URL

Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

quarantine/0frhMAb.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

quarantine/0frhMAb.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

quarantine/7axE6Jz.exe

Resource

win7-20240903-en

discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

quarantine/7axE6Jz.exe

Resource

win10v2004-20250217-en

discovery spyware stealer

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

quarantine/Dyshh8M.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

quarantine/Dyshh8M.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

quarantine/GEFwbK0.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

quarantine/GEFwbK0.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

quarantine/I8L5Xon.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

quarantine/I8L5Xon.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

quarantine/IxZcQMy.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

quarantine/IxZcQMy.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

quarantine/am_no.bat

Resource

win7-20240903-en

amadey lumma systembc vidar 092155 a4d2cd ir7am credential_access defense_evasion discovery execution persistence privilege_escalation spyware stealer trojan

windows7-x64

55 signatures

150 seconds

Behavioral task

behavioral14

Sample

quarantine/am_no.bat

Resource

win10v2004-20250217-en

amadey gcleaner healer lumma redline systembc a4d2cd testproliv credential_access defense_evasion discovery dropper evasion execution infostealer loader persistence spyware stealer trojan

windows10-2004-x64

56 signatures

150 seconds

Behavioral task

behavioral15

Sample

quarantine/download.exe

Resource

win10v2004-20250217-en

amadey healer lumma redline stealc systembc 092155 a4d2cd reno testproliv defense_evasion discovery dropper evasion execution infostealer persistence privilege_escalation spyware stealer trojan

windows10-2004-x64

61 signatures

150 seconds

Behavioral task

behavioral16

Sample

quarantine/imfsCjY.html

Resource

win7-20241010-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

quarantine/imfsCjY.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

quarantine/kablenet.html

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

quarantine/kablenet.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

quarantine/ninite22.html

Resource

win7-20241010-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

quarantine/ninite22.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

quarantine/pic2.exe

Resource

win7-20241023-en

discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral23

Sample

quarantine/pic2.exe

Resource

win10v2004-20250217-en

discovery spyware stealer

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral24

Sample

quarantine/pic3.exe

Resource

win10v2004-20250217-en

discovery execution persistence

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

quarantine/random.exe

Resource

win7-20240903-en

healer defense_evasion discovery dropper evasion execution trojan

windows7-x64

26 signatures

150 seconds

Behavioral task

behavioral26

Sample

quarantine/random.exe

Resource

win10v2004-20250217-en

healer defense_evasion discovery dropper evasion execution trojan

windows10-2004-x64

25 signatures

150 seconds

Behavioral task

behavioral27

Sample

quarantine/ssystemfiktums.html

Resource

win7-20241010-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

quarantine/ssystemfiktums.html

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral29

Sample

quarantine/xqWgymz.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

quarantine/xqWgymz.exe

Resource

win10v2004-20250217-en

redline testproliv discovery infostealer spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

quarantine/0frhMAb.exe
Size

1.7MB
MD5

971c0e70de5bb3de0c9911cf96d11743
SHA1

43badfc19a7e07671817cf05b39bc28a6c22e122
SHA256

67c9bb968cd0de2bfb2c24b00cfb2b98ac7403135ea47d98961652518584e45d
SHA512

a46523d8c71c0df25a043e2250ee1b6792e147314ec2097870a7972c892fd1a2022994f10823dadf54f161d11e808251b85a18efb9db9450d97af4b2f173f3c2
SSDEEP

49152:PILW3W4OH2ImHQRD2H8Vs1sfh8h08GhPdYJblsacEadrrtNb24q:i+eJNbHq

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\quarantine\0frhMAb.exe
"C:\Users\Admin\AppData\Local\Temp\quarantine\0frhMAb.exe"
1⤵
PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2484-0-0x000000013F020000-0x000000013F1CE000-memory.dmp

Filesize
1.7MB

Download